Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e0a8f4-864f-4cae-b4a8-a1e5ca179a75/1/VuXbVIWEd5I6Yk-1-L9j7A_XB18.roa
File: VuXbVIWEd5I6Yk-1-L9j7A_XB18.roa (raw, json)
Hash identifier: lTijo9zCPyhTCddvsTiZq9W1pnGvXZ0JuBA2+hhD2+0=
Subject key identifier: 56:E5:DB:54:85:84:77:92:3A:62:4F:B5:F8:BF:63:EC:0F:D7:07:5F
Certificate issuer: /CN=f980c91ebf1096462a2b74469dc61cb4a3ac3d32
Certificate serial: 0189F7C806A808703A210203BCAEA4D3ECB9
Authority key identifier: F9:80:C9:1E:BF:10:96:46:2A:2B:74:46:9D:C6:1C:B4:A3:AC:3D:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YDJHr8QlkYqK3RGncYctKOsPTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e0a8f4-864f-4cae-b4a8-a1e5ca179a75/1/VuXbVIWEd5I6Yk-1-L9j7A_XB18.roa
Signing time: Tue 15 Aug 2023 06:00:28 +0000
ROA not before: Tue 15 Aug 2023 06:00:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.19.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f7:c8:06:a8:08:70:3a:21:02:03:bc:ae:a4:d3:ec:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f980c91ebf1096462a2b74469dc61cb4a3ac3d32
Validity
Not Before: Aug 15 06:00:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56e5db54858477923a624fb5f8bf63ec0fd7075f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:e8:7f:40:1f:48:28:a5:da:7d:40:bc:10:
7f:c2:2e:98:c7:4a:21:fd:cb:ea:71:18:de:26:53:
92:9a:51:cd:35:7d:d4:c4:e9:fd:62:a9:16:ef:f2:
6c:46:bb:10:3d:9c:67:5f:8f:7d:36:32:06:c4:96:
42:39:31:02:48:f4:e6:3d:52:db:19:6d:51:71:48:
17:4b:9e:a9:29:34:98:c7:5a:46:38:5d:6a:5a:8d:
02:0c:bf:2d:f6:87:b4:0a:80:bd:7c:22:81:8b:ad:
1d:df:f7:77:70:0b:a6:dd:b0:5a:bf:c0:44:bf:b7:
b3:39:99:10:06:60:c2:65:b5:9f:45:34:b6:5c:e9:
a2:be:b8:bd:02:26:ba:a9:3c:20:fd:79:ea:b5:43:
1c:fe:f3:4b:eb:e5:e9:97:b8:4f:cd:67:f8:54:6b:
29:24:05:b8:79:48:17:5e:18:98:01:b3:c1:42:ee:
75:78:c8:e3:0f:a7:f3:8c:d9:3a:c1:85:03:d7:aa:
5e:46:ab:bf:5b:17:85:44:12:3a:59:af:41:01:8b:
e0:fc:b3:af:05:29:a5:25:88:56:15:56:cf:15:8f:
5f:cf:a1:ff:69:c0:dd:c9:b5:a3:bb:8b:e5:c9:36:
14:4b:bd:bd:d2:67:7d:a8:de:a0:8f:7f:65:19:90:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E5:DB:54:85:84:77:92:3A:62:4F:B5:F8:BF:63:EC:0F:D7:07:5F
X509v3 Authority Key Identifier:
keyid:F9:80:C9:1E:BF:10:96:46:2A:2B:74:46:9D:C6:1C:B4:A3:AC:3D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YDJHr8QlkYqK3RGncYctKOsPTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e0a8f4-864f-4cae-b4a8-a1e5ca179a75/1/VuXbVIWEd5I6Yk-1-L9j7A_XB18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e0a8f4-864f-4cae-b4a8-a1e5ca179a75/1/1-YDJHr8QlkYqK3RGncYctKOsPTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.20.0/24
Signature Algorithm: sha256WithRSAEncryption
93:6c:82:6e:8f:c9:b5:7b:73:e1:3a:90:50:4f:4e:bf:a0:3c:
f4:25:f9:39:7d:74:68:d3:0f:c9:08:68:f7:98:33:2c:1c:3a:
ee:77:ca:2b:a2:e7:f2:31:36:0d:45:c9:93:dc:30:70:3b:69:
34:9b:65:cc:60:51:95:e4:38:a9:07:d2:f6:ba:10:2b:c2:28:
3d:18:b9:b9:e9:80:55:7b:25:f9:92:46:13:5a:de:05:8f:bb:
ce:bb:a5:48:02:cb:e6:f2:39:f6:c5:cb:c6:03:e2:e3:04:8a:
37:3c:4e:30:05:b3:c6:8e:4b:31:c7:6e:71:52:35:0e:55:c8:
93:96:f9:7a:f4:67:3d:d3:c9:76:2e:5f:c3:7e:b6:3f:b2:6e:
af:dd:73:f1:0f:ae:21:9f:47:c7:91:8c:4b:4d:50:e1:34:a9:
a5:be:36:84:7f:7e:a8:ed:db:6c:b7:11:6a:a8:ef:0d:e0:45:
b8:ca:89:ab:32:7a:c5:59:db:9b:94:c8:bc:14:f9:30:9e:dd:
40:5e:c2:f5:a8:6e:d9:07:3f:ad:ab:c1:ea:c9:2c:dc:19:56:
22:7d:4b:1a:df:2f:f0:68:4b:9c:ba:04:02:1c:fe:54:92:06:
25:0f:25:05:c3:6f:94:d0:8d:31:97:1b:d1:0d:c3:16:d6:3c:
dd:a8:8f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 06:36:07 2023 by rpki-client on console-fra.rpki-client.org